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DETAILED ACTION 

1 . Applicant's request for reconsideration of the finality of the rejection of the last 
Office action is persuasive and, therefore, the finality of that action is withdrawn. 

2. Claims 1-8, 10-12, 14-15, 17-29, 34-38, 40-41, 43 and 45-48 are pending in the 
present application. 

3. Claim 1 has been amended. Claims 9, 13, 16, 30-33, 39, 42, 44 and 49-63 have 
been cancelled. 

Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

This application currently names joint inventors. In considering patentability of 
the claims under 35 U.S.C. 103(a), the examiner presumes that the subject matter of 
the various claims was commonly owned at the time any inventions covered therein 
were made absent any evidence to the contrary. Applicant is advised of the obligation 
under 37 CFR 1 .56 to point out the inventor and invention dates of each claim that was 
not commonly owned at the time a later invention was made in order for the examiner to 
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consider the applicability of 35 U.S.C. 103(c) and potential 35 U.S.C. 102(e), (f) or (g) 
prior art under 35 U.S.C. 103(a). 



5. Claims 1 -8, 1 0-1 2, 1 4, 1 5, 1 7-24, 27-29, 34-38, 40, 41 , 43 and 45-48 are rejected 
under 35 U.S.C. 103(a) as being unpatentable over Bladen et al. US Patent Application 
Publication No. 2002/0099586 A1 in view of Smith US Patent Application Publication 
No. 2003/0065613 A1 and Schneider et al. US Patent 6,785,728 B1 . 

Regarding claim 1 , Bladen et al. teaches a graphical and interactive interface 
system for managing risk management information [note: abstract "interactive risk 
management"; Figure 1C (112) E-RISK USER INTERFACE]; 

a secure database having risk management information accessible by authorized 
access through a network [note: Fig. 2E, paragraph 0153, 0164-0165, 0178-0183]; 

a graphics interface for generating graphic data of the risk management 
information in response to the authorized access [note: paragraph 0197 authorized 
viewers; Figure 7B note generation process flowchart; Figure 1J graphical user- 
interface; also Figure 3D step 330]; and 

means for generating email to alert authorized users to updates to the risk 
management information, wherein the risk management information pertains to property 
risks associated with loss of existing property associated with the plurality of entities 
located at a plurality of respective facilities [note: FSS paragraph 0451 through 0459 
"automatic electronic updates ... Access to a help line ...e-mail"; paragraph 0354 feedback; 
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note ability to define environment through policy statements paragraph 0309 and Figure 
3B; also note paragraphs 0283,0301-0302]. 

Although Bladen et al. teaches the invention substantially as cited above, they do 
not explicitly disclose that the email is generated to alert authorized users, however 
Smith teaches means for generating alerts through email notification [note: abstract; 
paragraph 0004 alerts generated and communicated to the various monitoring groups 
on a real time basis; and paragraph 0011-0013 email notifications are generated to 
inform various users; Figure 1 Alerts (104)]. It would have been obvious to one of 
ordinary skill at the time of the invention to have combined Smith with Bladen et al. 
because Smith further shows how email may be implemented in a network system as a 
means of communication to alert the end user of changes. Bladen et al. and Smith do 
not teach "wherein the risk management information is segmented within the database 
for association with a plurality of companies", however Schneider et al. teaches this 
feature. Schneider et al. teaches an access filter checks the trust level of each 
segment in a database [se: col. 21 line 56 through col. 22 line 25]. It would have been 
obvious to one of ordinary skill at the time of the invention to have combined Schneider 
et al. with the cited references because Schneider et al's sclable access control filter 
allows the end user to define complex security policies in terms of not only users but 
information sets [note abstract]. 
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6. Regarding claim 2, "the authorized access comprising user inputs to the graphics 
interface regarding risk management information" [Bladen et al. note paragraph 0197 
and 0198; paragraph 0053]. 

7. Regarding claims 17-24, "means for generating email generates email in 
response to receipt of an update ... periodic email defining updates " [note: Smith, 
Figure 1 communication interface 104; and paragraph 0004 and 0011-0013]. 

8. Regarding claim 27, the database comprising a SQL database server [note: 
Bladen et al. teaches various embodiments may be implemented paragraphs 0175- 
0183]. 

9. Regarding claim 6, Bladen et al. teaches the invention substantially as applied to 
claim 1 including a graphical and interactive interface system [note Bladen et al.: 
abstract "interactive risk management"; Figure 1C (1 12) E-RISK USER INTERFACE; 
paragraph 0197 authorized viewers; FSS paragraph 0451 through 0459 "automatic 
electronic updates ... Access to a help line ...e-mail"; paragraph 0354 feedback]. 
Although Bladen et al. teaches the invention substantially as cited above, they do not 
explicitly disclose that the email is generated to alert authorized users, however Smith 
teaches means for generating email alerts as a means of automatic notification of 
updates [note: abstract; paragraph 004, 0011-0013; and Figure 1 (104)]. It would have 
been obvious to one of ordinary skill at the time of the invention to have combined Smith 
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with Bladen et al. because Smith further shows how email may be implemented in a 
network system as a means of communication to alert the end user of changes. Bladen 
et al. and Smith do not teach "the database further comprising assistance data 
accessible concurrently with authorized access of the risk information", however 
Schneider et al. teaches this feature. Schneider et al. teaches an access policy may be 
defined in terms of both the user and information sets [see: col. 22 lines 45-64]. It would 
have been obvious to one of ordinary skill at the time of the invention to have combined 
Schneider et al. with the cited references because Schneider et al's sclable access 
control policy allows the end user to define specific access control functions. 

10. Regarding claim 7, the assistance data comprises loss prevention and control 
standards and guidelines [note: Schneider et al. col. 22 lines 54-56 defining information 
sets]. 

1 1 . Regarding claims 8 and 1 1 , prohibiting access . . . restricting [note: Schneider et 
al. user group tables col. 28 line 59 through col. 29 line 64]. 

12. Regarding claim 1 0, "wherein at least part of the risk management information is 
encrypted to facilitate the authorized access" [note: Schneider et al. teaches ancrytion 
and decription, col. 21 line 49 through col. 22 line 43]. 
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13. Regarding claims 12, 14, and 15, the filter functions comprising one or more of 
the following: country, city, state [note: Schneider et al. information may be defined]. 

14. Regarding claim 28, 29, 35, 38, 40-41 "the database responsive to electronically 
receive recommendations ..." [note: Bladen et al. provides for recommendations Figure 
3G (354)]. 

1 5. Regarding claim 34 further comprising means for appending user-generated 
comments to one or more segments [note: Schneider et al. col. 21 lines 10-47]. 

16. Regarding claims 36 and 37, "selectively switching between cost-benefit 
analysis, summaries, status screens, through the graphics interface ... [note Bladen et 
al.: Figure 1H interactive interface; Figure 5A 508; Figure 6A-6B; figure 12A-12B views]. 

17. Regarding claim 43, "wherein updates to risk management information comprises 
modifications ... [note: Bladen FSS paragraph 0451 through 0459 "automatic electronic 
updates ... Access to a help line ...e-mail"; paragraph 0354 feedback]. 

18. Regarding claim 45, "wherein means for generating email comprises an email 
server [Bladen Figure 8D]. 
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19. Regarding claims 3-5 and 46-48, Bladen et al. teaches a graphical and 
interactive interface system for managing risk management information [note: abstract 
"interactive risk management"; Figure 1C (112) E-RISK USER INTERFACE]. 
Although Bladen et al. teaches the invention substantially as cited above, they do not 
explicitly disclose that the email is generated to alert authorized users, however Smith 
teaches means for generating email alerts as a means of automatic notification of 
updates [note: abstract; paragraph 0004, and 0011-0013; Figure 1 (104)]; and a 
workflow application terminals [see: abstract "system provides for workflow 
management"; paragraph 0005 workflow program, paragraph 0126; Figure 1]. It would 
have been obvious to one of ordinary skill at the time of the invention to have combined 
Smith with Bladen et al. because Smith further shows how alerts may be implemented 
in a network system and how a workflow system would provide supervisory or 
administrative functions that would allow work to be monitored, audited, or applied to a 
specific process. Bladen et al. and Smith do not teach "the database further comprising 
assistance data accessible concurrently with authorized access of the risk information", 
however Schneider et al. teaches this feature. Schneider et al. teaches an access policy 
may be defined in terms of both the user and information sets [see: col. 22 lines 45-64]. 
It would have been obvious to one of ordinary skill at the time of the invention to have 
combined Schneider et al. with the cited references because Schneider et al's sclable 
access control policy allows the end user to define specific access control functions. 
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Response to Arguments 

20. Applicant's arguments with respect to claims 1-8, 10-12, 14-15, 17-29, 34-38, 40- 
41 , 43 and 45-48 have been considered but are moot in view of the new ground(s) of 
rejection. 

Applicant's amendment overcomes the rejections cited under 35 USC 112 
second paragraph. Independent claim 1 was amended to include the limitation of claim 
30; however newly cited prior art reference Smith is noted as teaching this limitation. 

Conclusion 

21 . THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 
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22. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Greta L. Robinson whose telephone number is 
(571 )272-41 18. The examiner can normally be reached on M-F 9:30AM-6:00PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Tony Mahmoudi can be reached on (571)272-4078. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/Greta L. Robinson/ 

Primary Examiner, Art Unit 2169a 

October 22, 2008 



